%PDF-1.3 1 0 obj << /Type /Catalog /Outlines 2 0 R /Pages 3 0 R >> endobj 2 0 obj << /Type /Outlines /Count 0 >> endobj 3 0 obj << /Type /Pages /Kids [6 0 R 17 0 R ] /Count 2 /Resources << /ProcSet 4 0 R /Font << /F1 8 0 R /F2 9 0 R /F3 10 0 R /F4 11 0 R >> /XObject << /I1 12 0 R >> >> /MediaBox [0.000 0.000 612.000 792.000] >> endobj 4 0 obj [/PDF /Text /ImageC ] endobj 5 0 obj << /Creator (DOMPDF) /CreationDate (D:20240925153314+00'00') /ModDate (D:20240925153314+00'00') /Title (Report 09-2024) >> endobj 6 0 obj << /Type /Page /Parent 3 0 R /Annots [ 13 0 R 15 0 R ] /Contents 7 0 R >> endobj 7 0 obj << /Length 2477 >> stream 0.702 0.800 0.816 rg 34.016 34.016 543.969 723.969 re f 1.000 1.000 1.000 rg 45.266 78.332 521.469 668.402 re f 0.773 0.773 0.773 rg 0.773 0.773 0.773 RG 45.266 746.734 m 566.734 746.734 l 565.984 745.984 l 46.016 745.984 l f 566.734 746.734 m 566.734 78.332 l 565.984 78.332 l 565.984 745.984 l f 45.266 746.734 m 45.266 78.332 l 46.016 78.332 l 46.016 745.984 l f 0.200 0.200 0.200 rg BT 61.016 693.716 Td /F1 14.4 Tf [(PHISHING WITH SUBJECT EMAIL EXPIRED)] TJ ET 0.400 0.400 0.400 rg BT 61.016 664.909 Td /F2 9.0 Tf [(Posted on )] TJ ET BT 104.045 664.909 Td /F3 9.0 Tf [(January 02,2018)] TJ ET BT 173.588 664.909 Td /F2 9.0 Tf [( by )] TJ ET BT 188.096 664.909 Td /F3 9.0 Tf [(IT Communications)] TJ ET 0.153 0.153 0.153 rg BT 61.016 637.420 Td /F4 9.0 Tf [(Several students and personnel have informed us of a )] TJ ET BT 279.131 637.420 Td /F2 9.0 Tf [(new)] TJ ET BT 301.631 637.420 Td /F4 9.0 Tf [( mail making its rounds on our campuses.)] TJ ET BT 61.016 617.431 Td /F4 9.0 Tf [(The sender is )] TJ ET BT 118.040 617.431 Td /F1 9.0 Tf [(Postmaster)] TJ ET BT 176.054 617.431 Td /F4 9.0 Tf [( with the subject of )] TJ ET BT 253.094 617.431 Td /F1 9.0 Tf [(Email Expired. )] TJ ET BT 326.624 617.431 Td /F4 9.0 Tf [(Thisphishing scam tells you that your e-mail account )] TJ ET BT 61.016 606.442 Td /F4 9.0 Tf [(will shortly expire and uses scare tactics to convince you to click on a link to activate your email.)] TJ ET BT 61.016 586.453 Td /F4 9.0 Tf [(Information Technology will never send you this type of email, ask you to click on a link or provide your username or )] TJ ET BT 61.016 575.464 Td /F4 9.0 Tf [(password. Do not respond to these emails or click on links.)] TJ ET q 210.750 0 0 375.000 61.016 189.266 cm /I1 Do Q BT 61.016 171.475 Td /F4 9.0 Tf [(If you have received mail that looks like this please immediately report it to the Information Technology Security Team )] TJ ET BT 61.016 160.486 Td /F4 9.0 Tf [(using the following method:)] TJ ET BT 61.016 140.497 Td /F4 9.0 Tf [(Send the spam/phishing mail to the following addresses)] TJ ET 0.373 0.169 0.255 rg BT 61.016 120.508 Td /F4 9.0 Tf [(help@sun.ac.za)] TJ ET 0.373 0.169 0.255 RG 0.18 w 0 J [ ] 0 d 61.016 119.357 m 128.183 119.357 l S 0.153 0.153 0.153 rg BT 128.183 120.508 Td /F4 9.0 Tf [(and)] TJ ET 0.373 0.169 0.255 rg BT 145.697 120.508 Td /F4 9.0 Tf [(sysadm@sun.ac.za.)] TJ ET 0.18 w 0 J [ ] 0 d 145.697 119.357 m 226.859 119.357 l S endstream endobj 8 0 obj << /Type /Font /Subtype /Type1 /Name /F1 /BaseFont /Helvetica-Bold /Encoding /WinAnsiEncoding >> endobj 9 0 obj << /Type /Font /Subtype /Type1 /Name /F2 /BaseFont /Helvetica-Oblique /Encoding /WinAnsiEncoding >> endobj 10 0 obj << /Type /Font /Subtype /Type1 /Name /F3 /BaseFont /Helvetica-BoldOblique /Encoding /WinAnsiEncoding >> endobj 11 0 obj << /Type /Font /Subtype /Type1 /Name /F4 /BaseFont /Helvetica /Encoding /WinAnsiEncoding >> endobj 12 0 obj << /Type /XObject /Subtype /Image /Width 281 /Height 500 /ColorSpace /DeviceRGB /Filter /DCTDecode /BitsPerComponent 8 /Length 19231>> stream JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82 C    !'"#%%%),($+!$%$C   $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$" }!1AQa"q2#BR$3br %&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz w!1AQaq"2B #3Rbr $4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz ?ಖ'h"̭ь׭I6y 0O[)EiSȬ*F :ڷ57wi8v8bTjkX\-KAB>xuN:Q*v/Scyf_&CO6`m. )J@ {tIerQNŤF3}%ˀn:;f-sDf %2{=MF]z2 Lp U6Ã4 {ӖmLg?iR BӴM-SR"Eh\[9{S;hmv<aTzօ.c%27,z=uXaٮ㱹P,esiV${}ME B Z+rI'bv`}OfOY[ 7)Zh7;@~5֟=|>Ev:a|9v2\qk1 v]r;F1`8,FHRkh)ӄc<`V$Ficx8O-dqֽz5иȍ?6GzZ]\[J$8 :lRnE5E2D T`Ǣ99~naŌ+kZF=7%VJ0G-UmF<[ *QQSN>Ѵ+wQη pGN¡0|*u/D`;E)3AzQO¹5_Z8z%35$w3Cy*qV]yۼJ d8n˪YNΝ%T' s:eekod{T\w ]ʎ}kJW jaV%;EgM_[٭ܐ-P*JR P6̰ IQֽ׈lҡI.~hJ[?8 nK1O$ 4S)x@eu9mJ{/jiQR};s%®[qx VP[HmbTnU fl$+m{=D4>T}!٪4fe_Q~tbΧG4{ K\EGآk/e$WX/ΏV9={rآkQՎi9A(:>_Xɤ^]>_aΧaIw+:_SG`AڣQT{8vrآjD?Վh旳{Iw+/z>CQ~]>~t1Χj{ O6qg9ܯ(Qz7V)@ɣǰ{Iw+}/:>~uc(PaϹ_Q(?Xi{8rGkh=͔_~taάIKð{IwZ89v~B[t3B~ɺLZħv?磞s `Ixu-_AS|svp5jlB2J 1y9_~*49W#(Q8='qHbqGQ-8Q/F)8\QzN({qG?Fqg=7O W͙P9q^"w_h8Z ;pfpplc,Dc=㯇V:?nFд> IEx_K|Yl$]說Oν擊zJd_~~{J:T(+FH?<8kCΛiРy 88R3dGm|FHGqnoSx`+ռ+s_HujJ02>9_ݜܡ9kక#[񦕗>w<|G!^$7}v&W^~=_-/`[cގ(N`(u!xv--x/]XX T\z͵->׬kz~)gѭJlr] q%eil\ bOE36:v&|VWo5UX05瑏ǚfRLwW6噀EE^L Gjmcq% nՍR>6?,G"^okiw 4QnTFr'ڰMĚ֭(m.)ึKm&%<":jy>#]` ͟(@c+~ONg+t [A /NR7mDH 9Ѭ͔ii㾴c%~p2qpqI jεexa- QUa[Y~%6M6LM#Ggŋ~q K ;ϊ:Eme(K#١ø퍧#֒6M^~&-oȷf};*a {:uh6\4Ȱ;'$v?mJ:67At44e Zu,Ɍ#̕GSQҴPhkH zuVÛ_wݵv{u4QBaw`|=#F[n($?ځKhiȨn#8TlF]X-\ ]I<8H>~ kXjBi$yaDmȱ9P4s/+H s}ᡑdO)+:)hZū]Zڴ/hLgzw"tshrv..:c\^b4&{`ec߼sqW },r#F*);IRwUKۦmmiwr4m8C-%sڶ.xn4} #fL9s@t_.UՅW͕'F ;©cVχ~ k$ m&Ѯwu(SԨ,ڟƅ9a^k|ӫ[A ~]Ҵ4 iUW N3!}vrws@ -QEQEQEQEQE֮OOomo Eq4JdI1<]iFb$Ev ߨv=vKFx/a 8O^ijx V'%xI07  :(!eYsaG54HeYq+БPk nUOktFə`ͿQ[66H0.K9}wzg+@ PEPk>5FFqq~ ף'4=ǁ)c"Z55 Lӑt;'~X\+n95Zeq-4sDJ7Q{*v}yQ|4 _TMC[`ʉ63I'&'zs-V p~sp8EMo xJ1бIV!4XlᶅBP;1TuzVI79sI13cuL.?\LD +;nTIyNxa^y6xxGILޤ"-^ve\l-q@j(5};OR۱P7n-QJ'݊姿W#<%OL5mSn9[بTvwf\4ڍN#BXSWn.v٨$@' rItfݏi2 ;/HSt}Ӛ nRle]/~ysEA Z ёU䴱x3:!"1իϴ_ZOȷ{[>5HF{VS jΊxբ>j][a.~_"1J/!5ju*LET5!V\rg8_ @kYeGF 8Y04i`#VĨK/UJelu($xns+M(!?n[8_ʁ@t-kъ])v8BcZʅvzJ.1ZxFToDTU(\Ap'LPJ+g5eth^&n;Fi`cZPx^`tB21U`-mf%_=8@,{#I[qACz۵[( 8(((*Ҧ|g\8/ yOeXӓ1r봱'5!,6g[b#o89ǵt0閐,(T7ֈX"X4V 7ր93m ɦ No&O`s*džRc 8G M^Mtio Hy@&VbH;OL:=]BNĶ&G*=xkaU,`ssDz qvwdM6GZ7v1ȂkŸZp2. 񸃁ڶdq=te0!G_Z4Q.jŝ=p;t+Vr!~*{DGi:n,"K^ $R@x ٭ [SЭ.; 6A#;q[UFCG*T'v;`I0)QEQEQEQEQEQEQE&h'ݣOyIGݠϽRyi<.h'ݣOyIG>Zv)=(sFi<Zv>fOhsF}<Zv>gIh?JO-?GݠҌyi<.hϽ'ݣOyi<.~fO姥.~fOJ<ҏ-?@ 7})<ZtP:\ĉM̗ }Z YLyC2ns@fG&,:ƚq []FDvln j5AK]¤mC(d' @(ыauj%j54|$ADM##y!b5:\5*O"L_%G5fY:ߴK+B9rhXpx6;uⅹ85I}rG[k`k ;1J+:jH5y3k_5_ 7Z]^@T1ޗcX)ҹA\z߰ʀNӪ]+#P(((((((('(XG$dcTGFlZUFn;('tT>4z2*e01M:lrqZԔ$@tWEO9\2Nt(ҵ*Q2ڝEjQOL=L#S*LQ[ ETQEQEQEQEQEQEQEQEKQ֬4Kہ ] '|:6KX|ƈØЫ cim%ȫ#DI~u8aV>_5:~զt@$i?6RG!iHݞz*#]n K-CREnypۣO@(0$H=)jL=|)tIl5JC@9\fg.1_O.ʳLcy#PB1sМKD 1S >xF{hH\r;u}+g%G4VXem)99j* gciҘ248 :(ԼwUN)x.l\o=c_X<2xB =PSY-N9Q.cmص:8ր=0 px'Ґ {W]WP(G<{Ar ̨lmǯ~o kڄem⻏W?wIx=I ph%'K4]zNPF!H?{^]VӚ k=F`ӆ`c#5t ,i[jZ|K ; 6ߐRPʡcRrp8?wZ'M4 "x'rxT; ,dJw1GE\ҴMj-jy.+ˇ=A8'۵w%L _4^[pRRK^VK=zo4+iַT!_Vkw3Y7 HGZԭ-6Z3(p5c0|OyynJ5+\Be|QQG\5i fխO 2sRA䁌=V$Qd4q 6*<_OUy-#Kb2Kϛzs5FzZ*8ǚ&]cN[#Ӵhfp|TA]*9kEn"$2&W jZZt7VVEF \{aϵTf, ,?$[d褄/n(Я[-253m\K@$zzxJkֺYa_+w󲬌Qb>gۑvI&b(Oa^x'[m;TK8//c{"vqd4nՔ|AaZY$F)vEu5x{RB?O+Y2ɐȾwǹy|#qk*P t-f/DW~x$`&=Q<)( 0 D0)QEQEQEv-i\\jr@H+ZLj[Kv+.dYԕu(XEi#Kk! 8H֩i7u=7O FYA1rq#T8#Skrs XfF@V1 FҞKe 3>- tuAZK>U 3k\w5$2:nU soX.m-M=&Vܸ#QI^mR;58dR $^8ޏ #Uw( *4j~',#.䍦lWqbI ~uN=ú*'un6a<92O@]#S Ӟ;pq<7(d\p).zb/RGl3,~xbGMꄞww*[9/][-$:rqTWo~&S"C5\/\E\gzTs_ֲekͧ\[%՜r 2"?@{Pmkz~"}6nJloǯs.g,pm. ǷT|={hyL0e'~|Im~POJelq@mtvGz["AuLs{w.;R}>m', &ϏVY}f;[m7zu֬jw21Y8XH #M(e;Qya2p x6Zrpi7`FWOrx8͔ v%fq[ W#6w7pۣPXe'>sO|4PAir-ĦPV\WnդIh/Ċ#XH#kܷ,z/!Y#L|RU>ԭ )", EQy`NOjݟ:2Cԭ٦@㼂@Ig*0fRHV&8ث>Gn9Y6ml4Y3S!`eEV\9\9\#)9NA ԭDhxˆ8R=rF+U[uqU֏K=i$, d6JA QEQF(l,x@s@9Rf@ E5oґe H@4f(-<ӖP*A)3Fhh4-I❻ڀMfL.Gجqf%sEQEQEQEQEQEQEQEC86nT<1:WMH@=@8($׮tuI$k]Ec1B$.D{H_Wڴ,GɬXZIq7q9˒G}:Qzʀs^}L1"1^4t'F3 jpB$܌ :žͨēބQpC ]֍hzlZuld" V$&_APĉ%6ܡ# <]}ź\kga:̙@붏APT~TK&^*ֵ "8t@ d`5aMQl RHXZj7#+Nqr1ֽohPGEy-%ў" 8rz|ME'5vX-m-]ć&Em%H qפ`z 6(.|Qˠ_.HL,˰ cA |Wpj5ZMTI`3t95TH˴r1Ҁ8_x]ԯZWQAMoRO167@7w0Ş#{O6=d5^ׯ鎵Ol4Kh]Y"!F}@:(y6-%̍LC)8- 8'#V.J{gsihP8=3z#ʑqG@c4^rOvpH`PmR2c{cJ ( ( ( ( ( ( ( 3Ebx^v CP/wgs@Y&syVy;)%lq~ hdoO<㙄D Q\:IɶJ(>K˪865 HfۍsTYh[8#W4^,c/,ㅶv?8=}*hw:?zljJ2/ǸWQıͰe|q子{h+6Ϊ8Nr3B5sV,|WjbF2ʐa':r[nɛTV~/ӞO$BZHM軈ӧ?JxN)b4[sYq֏g.(?ĶZ&'i\mnbg{;3[Gŝ?tRZ2%-QQX* Q<ۋY²41$ zONQsv$0BX*MDZ;O_ttW,ͬ:p[Iaw sZw~6i异"WH#y>s@ {xcYP 993WI՗Ζy4qQl7M"yBG0Əމy5*Mk s,D]~#tV;Sҧc\DcR$O\`+n[HC@BN6%CRrQ|L&d zѤۚVeem-Y gP,`+v7/@iku+$0Am@OtTQtM5#=-%4Cuj7sDwCKl'B0r8v:!I]]%- ' y dңauwtV)b.Y 36F7z62+9 <e2Nsp_!BI_9έ:[(h [lj9 1v. eym qp= %ƇEjm .m($h<;WWE`Z'K%ٜ̌͡94,N\3o0 zֺ(_O[? U;\[Q҆{i-_]ʜs<#:(V p4m*4r2.rxRy#oQ@Rx3IIex][becMxxǥ4x#Gd-d&V?0B9<Οh@m!*#mȠSKkcx/7% L֥^!"O94v$G 󤅟!eN8푑+I/-6uX_pIO4YKR˵eM˷|npqjoYL-?ahlC8rqʲ3ȠW7G9(Xg#Si^$xK[`uhʣ#Ú &[&)rH8+`Ӆ<.\ a$3S@%AKDTwҗvc~R|zfE-y`bi>9yy\g!v; {?j[3#FO<rz<}xEI]S,, ֚sKt?˸Igٞ9 Gϻ#oB0_`2(QEQEQEQEQEQEQEQEQEQEQEQEQE~imQZ*÷!`q3Z[8 ^2Hh YmNP#HƯi8rt6O^ڈ.|h.p\L#s 0 Z-ŷabx b!/lVu_PN-i Ph݁*dg P1СBjP*$,pcMƺ Jڔxr2Ocn3ZFcbVV6y~\T^b +vo.aʑ]=NH9@%vlJ9 gHSǾ[Xaw`Rboʲ Cm*c̅ d`ƥӼsc} Lk1a!eT} sZA֖ ( ( ( ( ( ( ( ( ( ( ( ( ( .3.kbeUx|ݍ8߬gH]b+xybXgIL|O9@#Ƃoojf޵1.򝈀s){HnͲX{vB[G>܂{q0ZGuzd1y9#9;`c4_ePK ^Sq۱ znx:\TdI𣓌9}r'| J19+mZIRFߺTf!je_hc$ƞx'1֭[=gd$2Bw )BTޮ@}-Szx9' 9WA@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@z/G=QMtfOESy违_΀E7fOESy违_΀E32z/K=QM̞ES>E̞:Oz/@=2z/@Es't)_Ό违>f_:?y违>g=~:?y违>g=t)_Ό违>g=t( ( (5Q+uK }ztn@sK@Q@Q@Q@Q@66q<#e\l:XНN~@xK@Q@Q@Q@RUiu HPF^@rx;->EPEPGEQEQE2W_^.鈗tp8yE4{@VN7Cp>v\S(((4P^%BZn?\ׄ;k̆S2O&wN:r3ސ-sVڰ)`:}~Sv)QEQEQER0▊|SOV$#UV?U6<Ɂ`T(z4->}E<̊Y@QEQES/_\yG.缿٠??e4}{}A/_\yG.缿٠??e4}{}A/_\Ŀ٣w?oƟ?Ə??~eOiZAwrϟ*GLuTs?f?P44liik?_˟/hcOOGƟ?ƿ/s=lf?P?44e5z7]Emʨ@Ɵ?Ə??~_q}>s=~liih/.缿٣?_Ɵ?ƗcOO_lf\y@??45 !bJ^?M44liikъ+,Alf?P?44e4}{}A/_\yG.缿٠??/Ɵ?ƿ/s=lf?P44liik?_˟/h{яz81F=(ǽ8cގ($?2TBʻ]{j=CJ~2EbpB?Ҽ nh1Դ{xwVd2OC9 kF᧝+P8gp#5?Xi=ʼn[awފYTa>^r> endobj 14 0 obj << /Type /Action /S /URI /URI (mailto:help@sun.ac.za) >> endobj 15 0 obj << /Type /Annot /Subtype /Link /A 16 0 R /Border [0 0 0] /H /I /Rect [ 145.6967 119.6752 226.8587 128.8327 ] >> endobj 16 0 obj << /Type /Action /S /URI /URI (mailto:sysadm@sun.ac.za) >> endobj 17 0 obj << /Type /Page /Parent 3 0 R /Annots [ 19 0 R 21 0 R 23 0 R 25 0 R 27 0 R ] /Contents 18 0 R >> endobj 18 0 obj << /Length 3908 >> stream 0.373 0.169 0.255 rg 0.373 0.169 0.255 RG 0.18 w 0 J [ ] 0 d 0.702 0.800 0.816 rg 34.016 34.016 543.969 723.969 re f 1.000 1.000 1.000 rg 45.266 430.954 521.469 327.030 re f 0.773 0.773 0.773 rg 0.773 0.773 0.773 RG 45.266 430.954 m 566.734 430.954 l 565.984 431.704 l 46.016 431.704 l f 566.734 757.984 m 566.734 430.954 l 565.984 431.704 l 565.984 757.984 l f 45.266 757.984 m 45.266 430.954 l 46.016 431.704 l 46.016 757.984 l f 61.016 446.704 m 550.984 446.704 l 550.984 447.454 l 61.016 447.454 l f 0.153 0.153 0.153 rg BT 61.016 740.193 Td /F4 9.0 Tf [(Attach the phishing or suspicious mail on to the message if possible. There is a good tutorial on how to do this at the )] TJ ET BT 61.016 729.204 Td /F4 9.0 Tf [(following link \(Which is safe\) : )] TJ ET 0.373 0.169 0.255 rg BT 181.544 729.204 Td /F4 9.0 Tf [(http://stbsp01.stb.sun.ac.za/innov/it/it-help/Wiki%20Pages/Spam%20sysadmin%20Eng.aspx)] TJ ET 0.373 0.169 0.255 RG 0.18 w 0 J [ ] 0 d 181.544 728.053 m 549.707 728.053 l S 0.153 0.153 0.153 rg BT 78.360 709.231 Td /F4 9.0 Tf [(1.)] TJ ET BT 91.016 709.215 Td /F4 9.0 Tf [(Start up a new mail addressed to )] TJ ET 0.373 0.169 0.255 rg BT 225.080 709.215 Td /F4 9.0 Tf [(sysadm@sun.ac.za)] TJ ET 0.18 w 0 J [ ] 0 d 225.080 708.064 m 303.740 708.064 l S 0.153 0.153 0.153 rg BT 303.740 709.215 Td /F4 9.0 Tf [( \(CC: )] TJ ET 0.373 0.169 0.255 rg BT 327.239 709.215 Td /F4 9.0 Tf [(help@sun.ac.za)] TJ ET 0.18 w 0 J [ ] 0 d 327.239 708.064 m 391.904 708.064 l S 0.153 0.153 0.153 rg BT 391.904 709.215 Td /F4 9.0 Tf [(\))] TJ ET BT 78.360 698.242 Td /F4 9.0 Tf [(2.)] TJ ET BT 91.016 698.226 Td /F4 9.0 Tf [(Use the Title SPAM \(without quotes\) in the Subject.)] TJ ET BT 78.360 687.253 Td /F4 9.0 Tf [(3.)] TJ ET BT 91.016 687.237 Td /F4 9.0 Tf [(With this New Mail window open, drag the suspicious spam/phishing mail from your Inbox into the New Mail )] TJ ET BT 91.016 676.248 Td /F4 9.0 Tf [(Window. It will attach the mail as an enclosure and a small icon with a light yellow envelope will appear in the )] TJ ET BT 91.016 665.259 Td /F4 9.0 Tf [(attachments section of the New Mail.)] TJ ET BT 78.360 654.286 Td /F4 9.0 Tf [(4.)] TJ ET BT 91.016 654.270 Td /F4 9.0 Tf [(Send the mail.)] TJ ET BT 61.016 634.281 Td /F4 9.0 Tf [(IF YOU HAVE FALLEN FOR THE SCAM:)] TJ ET BT 61.016 614.292 Td /F4 9.0 Tf [(If you did click on the link of this phishing spam and unwittingly give the scammers your username, e-mail address and )] TJ ET BT 61.016 603.303 Td /F4 9.0 Tf [(password you should immediately go to )] TJ ET 0.373 0.169 0.255 rg BT 221.081 603.303 Td /F4 9.0 Tf [(http://www.sun.ac.za/useradm)] TJ ET 0.18 w 0 J [ ] 0 d 221.081 602.152 m 341.627 602.152 l S 0.153 0.153 0.153 rg BT 341.627 603.303 Td /F4 9.0 Tf [( and change the passwords on ALL your university )] TJ ET BT 61.016 592.314 Td /F4 9.0 Tf [(accounts \(making sure the new password is completely different, and is a strong password that will not be easily )] TJ ET BT 61.016 581.325 Td /F4 9.0 Tf [(guessed.\) as well as changing the passwords on your social media and private e-mail accounts \(especially if you use the )] TJ ET BT 61.016 570.336 Td /F4 9.0 Tf [(same passwords on these accounts.\))] TJ ET BT 61.016 550.347 Td /F4 9.0 Tf [(IT has set up a website page with useful information on how to report and combat phishing and spam. The address is:)] TJ ET 0.373 0.169 0.255 rg BT 61.016 539.358 Td /F4 9.0 Tf [(http://blogs.sun.ac.za/it/en/2017/11/reporting-spam-malware-and-phishing/)] TJ ET 0.18 w 0 J [ ] 0 d 61.016 538.207 m 357.647 538.207 l S 0.153 0.153 0.153 rg BT 61.016 519.369 Td /F4 9.0 Tf [()] TJ ET BT 458.968 499.380 Td /F4 9.0 Tf [([Article by David Wiles])] TJ ET BT 61.016 479.391 Td /F4 9.0 Tf [()] TJ ET 0.400 0.400 0.400 rg BT 61.016 460.902 Td /F2 9.0 Tf [(Posted in:Security | Tagged:Phishing,Report Phishing | With 0 comments)] TJ ET endstream endobj 19 0 obj << /Type /Annot /Subtype /Link /A 20 0 R /Border [0 0 0] /H /I /Rect [ 181.5437 728.3716 549.7067 737.5291 ] >> endobj 20 0 obj << /Type /Action /S /URI /URI (http://stbsp01.stb.sun.ac.za/innov/it/it-help/Wiki Pages/Spam sysadmin Eng.aspx) >> endobj 21 0 obj << /Type /Annot /Subtype /Link /A 22 0 R /Border [0 0 0] /H /I /Rect [ 225.0797 708.3826 303.7397 717.5401 ] >> endobj 22 0 obj << /Type /Action /S /URI /URI (mailto:sysadm@sun.ac.za) >> endobj 23 0 obj << /Type /Annot /Subtype /Link /A 24 0 R /Border [0 0 0] /H /I /Rect [ 327.2387 708.3826 391.9037 717.5401 ] >> endobj 24 0 obj << /Type /Action /S /URI /URI (mailto:help@sun.ac.za) >> endobj 25 0 obj << /Type /Annot /Subtype /Link /A 26 0 R /Border [0 0 0] /H /I /Rect [ 221.0807 602.4706 341.6267 611.6281 ] >> endobj 26 0 obj << /Type /Action /S /URI /URI (http://www.sun.ac.za/useradm) >> endobj 27 0 obj << /Type /Annot /Subtype /Link /A 28 0 R /Border [0 0 0] /H /I /Rect [ 61.0157 538.5256 357.6467 547.6831 ] >> endobj 28 0 obj << /Type /Action /S /URI /URI (http://blogs.sun.ac.za/it/en/2017/11/reporting-spam-malware-and-phishing/) >> endobj xref 0 29 0000000000 65535 f 0000000008 00000 n 0000000073 00000 n 0000000119 00000 n 0000000339 00000 n 0000000376 00000 n 0000000514 00000 n 0000000603 00000 n 0000003132 00000 n 0000003244 00000 n 0000003359 00000 n 0000003479 00000 n 0000003587 00000 n 0000022987 00000 n 0000023114 00000 n 0000023187 00000 n 0000023315 00000 n 0000023390 00000 n 0000023502 00000 n 0000027463 00000 n 0000027591 00000 n 0000027722 00000 n 0000027850 00000 n 0000027925 00000 n 0000028053 00000 n 0000028126 00000 n 0000028254 00000 n 0000028334 00000 n 0000028461 00000 n trailer << /Size 29 /Root 1 0 R /Info 5 0 R >> startxref 28586 %%EOF report phishing « Informasietegnologie
Language:
SEARCH

  • Recent Posts

  • Categories

  • Archives

report phishing

Newer Entries »

Phishing mail using intimidation and threats

Friday, June 1st, 2018

There is no need to panic or be in anyway concerned for your personal safety about the latest batch of “phishing” emails that are going out with “death threats” or extortion regarding your “alleged” online activity around pornography sites etc.

A simple Google search using the following term “I Was Paid To Kill You scam” gave me 43 million results, all of the first 100 or so pages reporting this mail as a scam. A further search, narrowing the results down to only South Africa and only from last week, resulted in a little over 100 000 results, all of which were reporting as a hoax.

A similar scam first surfaced in the USA in 2006. An email from a would-be assassin was sent to a number of users from a Russian e-mail address. The “assassin” apparently appointed by a close acquaintance of his target, offers the victim the opportunity to buy him or herself a new lease on life by paying between $50,000 and $150,000.

If you receive mail like this, you should never panic. If you look at the extortion mail there are clues that reveal that the mail is a hoax:

  1. The subject line: “I Was Paid To Kill You”, “YOU SHOULD BE ASHAMED OF YOURSELF”, “YOUR PRIVACY HAS BEEN COMPROMISED”
    These are designed to cause anxiety, stress and panic.
  2. Time limits: “You have 48 Hours to pay…”
    How can the scammer know that you have received the mail and when you have read the mail and keep track of time to see if “48-hours” has passed?
  3. Engagement: “Contact me back via e-mail…”
    Never make contact with the scammers. This immediately alerts them that a “real person” read their mail and they will be able to concentrate their nefarious efforts on you.

If you ever receive emails like these, please report is to the Information Technology Cybersecurity Team using the following method:

Send the spam/phishing mail to help@sun.ac.za and sysadm@sun.ac.za.

Attach the phishing or suspicious mail on to the message if possible.
1. Start up a new mail addressed to sysadm@sun.ac.za (CC: help@sun.ac.za)
2. Use the Title “SPAM” (without quotes) in the Subject.
3. With this New Mail window open, drag the suspicious spam/phishing mail from your Inbox into the New Mail Window. It will attach the mail as an enclosure and a small icon with a light yellow envelope will appear in the attachments section of the New Mail.
4. Send the mail.

[Article by David Wiles]

Email

Tags: ,
Posted in E-mail, Security | Comments Off on Phishing mail using intimidation and threats

Phishing scam disguised as the university’s single-sign on page

Wednesday, May 16th, 2018

Due to the vigilance of an observant personnel member from the US Business School, we have encountered a dangerous phishing scam being sent from a compromised UNISA account.

The Subject is “Dear SUN E-mail User © Copyright 2018 Stellenbosch University” which should immediately raise eyebrows. The phishing email “warns” you about the pending expiration of your e-mail account and prompts you to click on a link to reactivate it.

See below what the mail looks like:

The danger is that the phishing scammers have perfectly forged the university’s SINGLE SIGN-ON page, that is used by students an personnel to access the portal pages, the my.sun.ac.za page, SUNLearn etc., as you can see below. Not many people will notice that the address is not a university address, neither is it secure.

It is imperative that you do not click on the link in the mail, and do not provide the scammers with your username and password as they might be able to access the university’s systems that are accessible through the Single Sign-On page.

Last year scammers were able to forge the e-HR login page through a phishing scam and several staff members had their bank accounts details and other personal details exposed to the scammers.  In the light of the issues that Tygerberg staff have been having with general network access earlier this month, and this week’s issue with e-mail, the arrival of this sort of mail at this time can fool some people into thinking that it is legitimate and lead to compromised network and e-mail accounts.

Here’s how to report any phishing or spam mail:

Send the spam/phishing mail to help@sun.ac.za and sysadm@sun.ac.za.

Attach the phishing or suspicious mail on to the message if possible.
1. Start up a new mail addressed to sysadm@sun.ac.za (CC: help@sun.ac.za)
2. Use the Title “SPAM” (without quotes) in the Subject.
3. With this New Mail window open, drag the suspicious spam/phishing mail from your Inbox into the New Mail Window. It will attach the mail as an enclosure and a small icon with a light yellow envelope will appear in the attachments section of the New Mail.
4. Send the mail.

[Information supplied by David Wiles]

Email

Tags: ,
Posted in E-mail, Security | Comments Off on Phishing scam disguised as the university’s single-sign on page

Phishing scam about reaching your mailbox storage limit

Tuesday, March 6th, 2018

Monday started with a phishing scam threatening to close your mailbox, and Monday is ending with another attack, using a similar intimidation tactic about your mailbox size.

The grammar and spelling is very poor on this one so it should be rather easy to spot. However the use of University branding and “STELLENBOSCH HELP DESK” might fool some people.

The Subject will be “We apologies” (sic)

Dear User,

You have reached the storage limit for your mailbox. Please visit the following link to complete your e-mail access restore.

Follow this link to complete the process: Click Restore

STELLENBOSCH HELP DESK

If you do click on the link (which does not go to a university website) …this webpage will appear. 

 

 

Many thanks to all of you who reported this.

Remember these 5 guidelines:

  1. Information Technology will never request sensitive information such as passwords.
  2. Phishing e-mails often appear as an important notice or urgent matter such as threats that your mailbox is over quota.
  3. Use of aggressive or intimidating language such as ‘immediately’ and threats of consequences of not verifying your account.
  4. Misspelled words and poor grammar that take away from the professional context of the e-mail. (this one is quite obvious)
  5. Use of an impersonal greeting. (Dear User)

If you have received mail that looks like this please immediately report it to the Information Technology Security Team using the following method:

Send the spam/phishing mail to help@sun.ac.za  and sysadm@sun.ac.za

 Attach the phishing or suspicious mail on to the message if possible. There is a good tutorial on how to do this at the following link (Which is safe) : http://stbsp01.stb.sun.ac.za/innov/it/it-help/Wiki%20Pages/Spam%20sysadmin%20Eng.aspx

  1. Start up a new mail addressed to sysadm@sun.ac.za (CC: help@sun.ac.za)
  2. Use the Title “SPAM” (without quotes) in the Subject.
  3. With this New Mail window open, drag the suspicious spam/phishing mail from your Inbox into the New Mail Window. It will attach the mail as an enclosure and a small icon with a light yellow envelope will appear in the attachments section of the New Mail.
  4. Send the mail.

IF YOU HAVE FALLEN FOR THE SCAM:

If you did click on the link of this phishing spam and unwittingly give the scammers your username, e-mail address and password you should immediately go to http://www.sun.ac.za/useradm and change the passwords on ALL your university accounts (making sure the new password is completely different, and is a strong password that will not be easily guessed.) as well as changing the passwords on your social media and private e-mail accounts (especially if you use the same passwords on these accounts.)

IT have set up a website page with useful information on how to report and combat phishing and spam. The address is:https://blogs.sun.ac.za/it/en/2017/11/reporting-spam-malware-and-phishing/

[Article by David Wiles]

 

Email

Tags: ,
Posted in E-mail, Security | Comments Off on Phishing scam about reaching your mailbox storage limit

Phishing with subject “Email Expired”

Thursday, February 1st, 2018

Several students and personnel have informed us of a “new” mail making its rounds on our campuses.

The sender is “Postmaster” with the subject of “Email Expired”. This phishing scam tells you that your e-mail account will shortly expire and uses scare tactics to convince you to “click” on a link to activate your email.

Information Technology will never send you this type of email, ask you to click on a link or provide your username or password. Do not respond to these emails or click on links.

If you have received mail that looks like this please immediately report it to the Information Technology Security Team using the following method:

Send the spam/phishing mail to the following addresses

help@sun.ac.za and sysadm@sun.ac.za.

Attach the phishing or suspicious mail on to the message if possible. There is a good tutorial on how to do this at the following link (Which is safe) : http://stbsp01.stb.sun.ac.za/innov/it/it-help/Wiki%20Pages/Spam%20sysadmin%20Eng.aspx

  1. Start up a new mail addressed to sysadm@sun.ac.za (CC: help@sun.ac.za)
  2. Use the Title “SPAM” (without quotes) in the Subject.
  3. With this New Mail window open, drag the suspicious spam/phishing mail from your Inbox into the New Mail Window. It will attach the mail as an enclosure and a small icon with a light yellow envelope will appear in the attachments section of the New Mail.
  4. Send the mail.

IF YOU HAVE FALLEN FOR THE SCAM:

If you did click on the link of this phishing spam and unwittingly give the scammers your username, e-mail address and password you should immediately go to http://www.sun.ac.za/useradm and change the passwords on ALL your university accounts (making sure the new password is completely different, and is a strong password that will not be easily guessed.) as well as changing the passwords on your social media and private e-mail accounts (especially if you use the same passwords on these accounts.)

IT has set up a website page with useful information on how to report and combat phishing and spam. The address is: https://blogs.sun.ac.za/it/en/2017/11/reporting-spam-malware-and-phishing/

 

[Article by David Wiles]

 

Email

Tags: ,
Posted in Security | Comments Off on Phishing with subject “Email Expired”

Newer Entries »
 

© 2013-2024 Disclaimer: The views and opinions expressed in this page are strictly those of the page author(s) and content contributor(s). The contents of this page have not been reviewed or approved by Stellenbosch University.